RSS   Vulnerabilities for 'Async-git'   RSS

2021-02-18
 
CVE-2020-28490

CWE-88
 

 
The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb')

 
2021-01-26
 
CVE-2021-3190

CWE-78
 

 
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.

 


Copyright 2024, cxsecurity.com

 

Back to Top